Work with Microsoft 365 user accounts

Create a new user

1. Click the Microsoft Office 365 administrative views then click the Users web query.

2. On the Actions menu, click New User.

3. Enter the new user’s First and Last Name and verify the automatically generated values on the form. Optionally, you can complete Job Title , Department, and Office.

4. Verify or select the proper location from the Location menu. This value is required if the user will be assigned an Office 365 License.

5. To set a Manager, click the Change button at the right of the Manager attribute.

6. To assign an Office 365 License, verify the Assign License option is selected.

7. Click the License Option link to see the Office 365 License dialog.

   NOTE: If the License Option link is not displayed on the dialog box proceed to step 9.

8. Choose the desired license and option for the user then click OK.

9. Click Next.

10. To let the system create a complex password set the Auto-generated password option to enter a custom password click then type password option and enter a password.

11. Check the desired options for how the account settings will be applied to the new account.

12. Click Create.

After a few moments, a green or red indication balloon will appear at the top right of the portal. Clicking the ACTIVITIES icon will display the results of the account creation.

Reset a password

1. Click the Microsoft Office 365 administrative views then click the Users web query.

2. Enter the name of the user in the search field and click Search or press Enter.

3. Click the checkbox to the left of the user’s name.

4. On the Actions menu, click Reset Password.

5. Under Password , choose to use the Auto generated password or click Type Password to enter a new password.

6. Under Email notification , select Don't send the password or click Send to, to enter a new email address of someone who will receive a copy of the user’s new password by e- mail.

7. Check User must change password at next logon to force the user to change the password.

8. Check Unlock account if the account is in the locked-out state.

9. Enter a comment that will be recorded in the operational history log.

10. Click Reset Password.

11. After the confirmation is displayed, click Close.

Suspend a user

1. Click the Microsoft Office 365 administrative views then click the Users web query.

2. Enter the name of the user in the search field and click Search Objects.

3. Click the checkbox to the left of the user’s name.

4. On the Actions menu, click Suspend.

5. Enter a comment that will be recorded in the operational history log.

6. Click Suspend.

Undo Suspend

1. Click the Microsoft Office 365 administrative views then click the Users web query.

2. Enter the name of the user in the search field and click Search Objects.

3. Click the checkbox to the left of the user’s name.

4. On the Actions menu, click Undo Suspend.

5. Enter a comment that will be recorded in the operational history log.

6. Click Undo Suspend.

Delete a user

TIP: Consider using Suspend User instead of Delete.

1. Click the Microsoft Office 365 administrative views then click the Users web query.

2. Enter the name of the user in the search field and click Search Objects.

3. Click the checkbox to the left of the user’s name.

4. On the Actions menu, click Delete.

5. Enter a comment that will be recorded in the operational history log.

6. Click Delete.

View or change user properties

1. Click the Microsoft Office 365 administrative views then click the Users web query.

2. Enter the name of the user in the search field and click Search Objects.

3. Click the checkbox to the left of the user’s name.

4. On the Actions menu, click Properties.

5. You can view or modify user properties on these tabs:

   • Account

   • Settings

   • Organization

   • Contact

   • Member Of

1. Info

   1. To generate a Last Azure AD Logon , you need a successful sign-in. The value of the Last Azure AD Logon can be blank if:

      • The last successful sign-in of a user took place before April 2020.

      • The affected user account was never used for a successful sign- in.

   2. Creation type Indicates whether the user account was created as a regular school or work account ( null ), an external account ( Invitation ), a local account for an Azure Active Directory B2C tenant ( LocalAccount ) or self-service sign-up using email verification ( EmailVerified ).

   3. All dates are displayed in UTC format.

Compare Membership

1. Click the Microsoft Office 365 administrative views then click the Users web query.

2. Enter the name of the user in the search field and click Search Objects.

3. Click the checkbox to the left of the user’s name.

4. On the Actions menu, click Compare Membership.

5. Click Change to select Template account.

6. If the Add and Remove buttons are available for you, you can modify the user's membership:

   • To copy groups from a template user account to target you should select the groups that only the template user has and click Add.

   • To remove groups you should select the groups that a target user has but a template user doesn't have and click Remove.

Prevent Sign-in for a user (block credentials)

1. Click the Microsoft Office 365 administrative views then click the Users web query.

2. Enter the name of the user in the search field and click Search Objects.

3. Click the checkbox to the left of the user’s name.

4. On the Actions menu, click Prevent Sign- in.

Allow sign-in for a user (unblock credentials)

1. Click the Microsoft Office 365 administrative views then click the Users web query.

2. Enter the name of the user in the search field and click Search Objects.

3. Click the checkbox to the left of the user’s name.

4. On the Actions menu, click Allow Sign- in.

Set or update a Job Title, Department, or Office for a user

1. Click the Microsoft Office 365 administrative views then click the Users web query.

2. Enter the name of the user in the search field and click Search Objects.

3. Click the checkbox to the left of the user’s name.

4. On the Actions menu, click Properties.

5. Switch to the Organization tab at the top.

6. Type a Job Title or Department for the user.

7. Click Update.

Set or update a Manager for a user

1. Click the Microsoft Office 365 administrative views then click the Users web query.

2. Enter the name of the user in the search field and click Search Objects.

3. Click the checkbox to the left of the user’s name.

4. On the Actions menu, click Properties.

5. Switch to the Organization tab at the top.

6. Click Change to the right of the Manager field.

7. Enter the manager’s name in the search field and click Search Objects.

8. Click the checkbox to the left of the manager’s name then click OK.

9. Click Update.

Add a user to a group

1. Click the Microsoft Office 365 administrative views then click the Users web query.

2. Enter the name of the user in the search field and click Search Objects.

3. Click the checkbox to the left of the user’s name.

4. On the Actions menu, click Properties.

5. Switch to the Member of tab at the top.

6. Click Add.

7. Enter the name of the group in the search field and click Search Objects.

8. Click the checkbox to the left of the group name(s) from which the user is to be added then click Add.

9. Click Ok.

10. Click Update.

Remove a user from a group

1. Click the Microsoft Office 365 administrative views then click the Users web query.

2. Enter the name of the user in the search field and click Search Objects.

3. Click the checkbox to the left of the user’s name.

4. On the Actions menu, click Properties.

5. Switch to the Member of tab at the top.

6. Click the checkbox to the left of the group name(s) from which the user is to be removed then click Remove.

7. Click Update.

Assign an Office 365 License to a User

1. Click the Microsoft Office 365 administrative views then click the Users web query.

2. Enter the name of the user in the search field and click Search Objects.

3. Click the checkbox to the left of the user’s name.

4. On the Actions menu, click Office 365 License.

Authentication Methods

1. Click the Active Directory administrative unit.

2. Click the AD Users query.

3. Enter the name of the user in the search field and click Search Objects.

4. Click the checkbox to the left of the user’s name.

5. On the Actions menu, click Authentication Methods.

6. Add authentication methods for the selected user:

   • Email

   • Mobile phone

   • Office phone

   • Alternate mobile

   • Temporary Access Pass

7. Click Update.

Teams Policies

1. The Teams Policies web action is available in the following Admin Units and queries:

   • Active Directory > AD Users

   • My Organization > My AD Users

   • Microsoft Office 365 > Users

2. Enter the name of the user in the search field and click Search Objects.

3. Click the checkbox to the left of the user’s name.

4. On the Action s menu, click Teams Policies.

5. Select Teams Policies to assign to this user.

6. Click Update.

Convert to Guest

1. Click the Microsoft Office 365 administrative views then click the Users web query.

2. Enter the name of the user in the search field and click Search Objects.

3. Click the checkbox to the left of the user’s name.

4. On the Action s menu, click Convert to Guest.

5. Enter a comment that will be recorded in the operational history log.

6. Click Convert to Guest.

OneDrive Properties

1. Click the Microsoft Office 365 administrative unit.

2. Click the Users web query.

3. Enter the name of the user in the search field and click Search Objects.

4. Click the checkbox to the left of the user’s name.

5. On the Actions menu, click OneDrive Properties.

6. Specify secondary site collection admins.

7. Specify the following settings:

   • If people outside the organization can access user OneDrive;

   • Storage quota in GB.

8. Click Update.

AAD Administrative Units

1. The AAD Administrative Units web action can be used in these web queries:

   • Users

   • Groups

   • Teams

   • Guest users

2. Enter the name of the object in the search field and click Search Objects.

3. Click the checkbox to the left of the object’s name.

4. On the Actions menu, click AAD Administrative Units.

5. If the Parent container Azure AD Administrative Unit is not set, you can click Change and select the parent container.

   NOTE: Only Azure AD Administrative Units that are marked Treat as Container can be selected as parent containers.

6. If the selected object is already added to multiple container Azure AD Administrative Units you will see the message that you need to select a single Administrative Unit as a parent.

7. Click Add to add the selected object to Other Azure AD Administrative Units that are not set as containers.

Move

1. Enter the name of the object in the search field and click Search Objects.

2. Click the checkbox to the left of the object’s name.

3. On the Actions menu, click AAD Administrative Units.

4. Click Change and select the parent container.

   NOTE: Only Azure AD Administrative Units that are marked Treat as Container can be selected as parent containers.

5. If the selected object is already added to multiple container Azure AD Administrative Units you will see the message that you need to select a single Administrative Unit as a parent.

6. Select the parent container.

7. Click Update to move the selected object to Parent Container Azure AD Administrative Unit.

Authentication Policy

1. Enter the name of the object in the search field and click Search Objects.

2. Click the checkbox to the left of the object’s name.

3. On the Actions menu, click Authentication Policy.

4. Select Exchange Online authentication policy to assign.

5. Click OK.

Teams Voice Settings

1. The Teams Voice Settings web action is available in these Admin Units and queries:

   • Active Directory > AD Users

   • My Organization > My AD Users

   • Microsoft Office 365 > Users

2. Enter the name of the user in the search field and click Search Objects.

3. Click the checkbox to the left of the user’s name.

4. On the Actions menu, click Teams Voice Settings.

5. Update Teams policies if needed.

6. To update the user a phone number select Update Number.

7. Specify the type of number: Calling Plan, Direct Routing, or Operator Connect.

8. For the Calling Plan, specify the Phone number and Emergency Location , and select them from the list

9. There are several options for Direct Routing:

   • Enter manually - specify the number manually: copy/paste it from an outside source

   • CSV Mapping - select this option to assign the number that will be selected from the rule configured by the administrator

   • Clear current number - use this option to delete the number

10. Click Update.

User Devices

1. Enter the name of the object in the search field and click Search Objects.

2. Click the checkbox to the left of the object’s name.

3. On the Actions menu, click User Devices.

4. You can see user's owned devices and registered devices

5. You can look through the details of the selected device, Bitlocker keys, enable or disable the device or delete the device.

Change History